Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: jAxscYpBBAXYIpiGxcsn40qa87h4o/HTYCRTaMnT+Cc=
Subject key identifier: 40:1B:24:29:DC:22:D9:51:DF:D2:33:F5:65:E1:3C:2C:17:22:B0:12
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 019D38D2E10A73C9E748B7306FEF8FA3FFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 0E03
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: xm2EH0bMS7Lp6R8nocX142XHBiE.roa (hash: Sw8xk1+itLI+I+ws0cUgg1V722l6xa6aNkokvCgQUD4=)
2: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: WxIFUzW6jvZ43yi1ROfgNVLtcVTk7FivW3u9hzMern0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e1:0a:73:c9:e7:48:b7:30:6f:ef:8f:a3:ff:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=401b2429dc22d951dfd233f565e13c2c1722b012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:f7:e5:c8:ef:bc:90:08:0a:d0:f2:ac:76:
d5:95:61:ef:b6:32:04:63:5c:04:82:cc:a2:51:36:
92:6a:2f:e6:fa:86:ef:7e:53:f0:0f:a3:6f:e2:b3:
49:10:90:3a:0b:37:f9:88:7f:f4:ff:ef:d1:e5:45:
71:8d:e2:71:04:79:ce:6e:d1:cf:06:6a:aa:1f:12:
cf:70:22:53:4f:08:ae:d5:a5:e4:61:48:30:32:a4:
5d:e8:02:57:ce:0b:da:56:5a:55:3f:ed:b4:1a:ae:
1c:9b:a6:0e:c2:45:7e:ac:bd:d4:f6:e1:b1:f6:12:
5d:dd:99:f6:1e:9f:e7:97:3e:c3:8f:1a:4a:15:c3:
e7:5c:34:64:0f:00:11:4b:8e:22:36:20:fb:99:cc:
7d:1c:a2:1b:b4:70:c7:b5:18:af:92:58:5c:d6:d1:
c4:b3:26:90:01:2d:d8:21:35:2c:f2:30:76:11:9a:
c4:16:f3:a1:4c:53:0b:1f:db:f9:75:c0:10:29:67:
69:5d:c9:92:ca:f5:3d:70:32:c6:9f:16:bd:5e:80:
0c:35:d1:f0:38:37:fb:da:b8:6b:c4:e9:7c:eb:18:
b4:f0:58:fd:b4:a4:8b:a8:33:e2:e5:88:1d:28:af:
32:12:ef:5c:78:9b:dd:3a:6f:f4:a7:c0:ec:e3:3b:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:24:29:DC:22:D9:51:DF:D2:33:F5:65:E1:3C:2C:17:22:B0:12
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d2:39:91:27:44:23:5a:00:09:d3:17:f4:b8:c0:6d:67:02:
06:27:84:cd:e7:05:d4:01:09:9c:d4:95:58:3b:86:69:04:a7:
ab:cd:28:c7:ae:e1:8c:63:e1:74:07:e2:8b:e2:96:9b:6d:d4:
04:b9:69:52:c3:85:76:f4:bc:38:86:e9:4e:c4:14:37:05:2b:
e4:ad:3b:99:01:ec:d0:10:25:0a:07:34:0a:2c:a9:5b:a6:1b:
49:d6:74:19:bb:34:b0:11:e3:aa:e0:c2:b2:f2:e5:aa:c4:10:
d9:8f:5e:0f:42:9a:3b:9a:f7:9a:b9:10:a0:12:54:44:d8:50:
d7:08:3e:5a:f7:e3:67:d9:f6:f4:39:f6:0c:f4:8b:6b:2f:61:
61:c3:e1:03:51:93:81:66:53:44:00:34:d4:49:82:0e:dd:58:
82:3a:12:0d:1f:0b:38:e9:86:2a:d6:69:98:bb:05:65:3c:f0:
ee:92:5a:13:d7:c2:4e:ae:aa:49:7a:85:b0:1d:64:e2:1c:d6:
98:19:fc:68:45:b1:44:46:42:79:29:75:14:5c:2b:59:b4:fb:
77:84:eb:ae:bd:c0:27:54:19:51:0c:1c:71:2a:47:84:5f:91:
7f:88:60:7b:cd:a6:cf:dc:41:9e:56:4f:de:bf:c5:05:2a:c5:
5f:e3:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:43 2026 by rpki-client